Identity & Access Management (IAM) Engineer
Backblaze, a cloud storage and data backup company founded in 2007, is seeking an Identity & Access Management (IAM) Engineer to join their remote team in the United States. The IAM Engineer will be responsible for designing, implementing, and operating identity and access capabilities for various entities, including human users, non-human identities, workloads, devices, services, and AI agents. This role focuses on the subject side of access control, emphasizing least privilege, separation of duties, strong authentication, automated lifecycle management, and short-lived credentials.
Key responsibilities include designing and operating authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities. The engineer will also automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning. Implementing phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery is also essential. Additionally, the role involves governing service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities. The engineer will collaborate with architects, engineers, and resource owners to ensure efficient access mediation and minimize excessive privilege, unnecessary sharing, and cross-domain exposure. Monitoring identity posture and partnering with Security Operations to investigate identity threats and rapidly revoke compromised access are also part of the role.
Candidates should have hands-on experience engineering enterprise IAM systems and integrations, with strong knowledge of authentication, authorization, federation, identity lifecycle management, role/group design, separation of duties, and least privilege. Experience with phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices is required. The role also requires experience managing human and non-human identities, including service, machine, workload, or device identities, and automating identity processes using APIs, scripting, or Infrastructure-as-Code. An understanding of PKI, secrets management, short-lived credentials, workload identity federation, and technologies such as OIDC, OAuth, and SPIFFE/SPIRE is essential. The ability to reason about identity and authorization across distributed systems and collaborate with architects and engineers on secure access design is also necessary.
Backblaze offers a comprehensive benefits package, including healthcare for family members, dental and vision coverage, competitive compensation, a 401K plan, RSU grants for full-time employees, an ESPP program, flexible vacation policy, maternity and paternity leave, a MacBook Pro for work with a generous workstation stipend, childcare bonuses, fertility treatment support, a learning and development program, commuter benefits, and a culture that supports a healthy work-life balance.
Backblaze is known for its transparent culture, emphasizing honesty and openness with customers, partners, and employees. The company supports a healthy work-life balance and offers a flexible vacation policy. Founded in 2007, Backblaze has experienced significant growth, managing over three billion gigabytes of data storage for more than 500,000 customers in 175 countries. The company is guided by values such as fairness, sustainability, simplicity, open communication, and unconventional thinking.